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IN THE CLAIMS 

Please cancel claims 3 and 30, amend claims 1 , 4, 19-21, 28. 31, and add new claims 43-50 as 
follows: 

1 , (CURRENTLY AMENDED) A method of storing program material in 3 rne&a 
storage device communicflrively coup led to a receiver for subsequent replay, comprising the steps of: 

(a) accepting encrypted access control information and the ptogram material encrypted 
according to a first encryption key in the receiver , the access control information including a first 
encryption key and control data; 

(b) decrypting the received access control information in a conditional access module 
releascablv coupleahte with the receiver to produce the fitat encryption key; 

(c) decrypting the program material using the first encryption key; 

(d) re-encrypting the program material according to a second encryption key; 

(e) encrypting the second encryption key m jfre cond itional access module according to 
a third encryption key to produce a fourth encryption key; and 

(£) providing the re-encrypted program material and the fourth encryption key for 

storage. 

2, (ORIGINAL) The method of claim 1, wherein the encrypted access control 
information further comprises temporally- variant control data, and the method further comprises 
the step a of: 

decrypting the received access control information to produce the temporally-variant control 
data; and 

modifying the temporally variant control data to generate temporally-invariant control data. 



3. (CANCELED) 



4. (CURRENTLY AMENDED) The method of claim [[3]] 1, wherein the conditional 
access module is implemented on si smartcard wi T imuuk.a t iTfcly - wuplcAbIc. t o » t imer and a media 
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5. (ORIGINAL) The method of claim 1 , wherein thtf Access control information 
further composes metadata describing at least one right for the program material. 

6. (ORIGINAL) The method of claim 5, furrher comprising the step of: 
generating the second encryption key at least in part from the metadata. 

7. (ORIGINAL) The method of claim 1, wherein steps (b)-(f) are performed in 
response to a pre-buy message. 

8. (ORIGINAL) The method of claim 7, wherein the acccs* control information 
further comprises metadata describing at least one right for the program material, and the method 
further comprises the step of: 

generating replay right data from the metadata. 

9. (ORIGINAL) The method of claim 8, wherein the replay tight data is further 
generated from pre-buy data. 

1 0. (ORIGINAL) The method of claim 1 > further comprising the steps of: 
retrieving the stored re-encrypted program material and the fourth encryption key; 
decrypting the fourth encryption key using the third encryption key to produce the second 

encryption key; and 

decrypting the re-encrypted material using the second encryption key. 

1 1 . (ORIGINAL) The method of claim 10, wherein the step of decrypting the fourth 
encryption key using the third encryption key to produce the second encryption key is performed in 
response to a subscriber request to access the program material. 
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1 2. (ORIGINAL) The method of claim 1 1, wherein the access control information 
further compri&ee metadata describing at least one right for the program material the subscriber 
request to access the program material comprises buy data, and the method further comprises the 
steps of: 

generating replay right data from the metadata; 
accepting the buy data; 

comparing the buy data with the replay right data; and 

decrypting the fourth encryption key using the third encryption key to produce the second 
encryption key according to the comparison between the buy data and the replay right data. 

13. (ORIGINAL) The method of claim 12, wherein steps (b)-(f) ate performed in 
response to a pre-buy message, and wherein*. 

the second encryption key and the third encryption key arc stored in a smartcard, and the 
replay right data is generated from the metadata and the pre-buy message in the smartcard; and 

the steps of accepting the buy data, comparing the buy data with the replay right data, and 
decrypting the fourth encryption key using the third encryption key to produce the second 
encryption key according to the comparison between the buy data and the replay right data are 
performed in the smartcard. 

14. (ORIGINAL) The method of claim 1, wherein the re-encrypted program material 
and the fourth encryption key are stored on a media storage device. 

15. (ORIGINAL) The method of claim 1, wherein the control data is temporally- 
variant. 

16. (ORIGINAL) The method of claim 15, wherein the temporally-variant control data 
associates an expiration time with the program material. 
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17. (ORIGINAL) An apparatus for storing program material encrypted according to a 
first encryption key for replay, comprising: 

a conditional access module, for accepting encrypted access control information including 
the first encryption key and temporally-variant control data, the control access module comprising: 

a first decryption module, for decrypting the access control information to produce 
the first encryption key; 

a first encryption module, fot encrypting a second encryption key with a third 
encryption key to produce a fourth encryption key; and 

a second decryption module for decrypting the fourth encryption key to produce the 
second encryption key. 

18. (ORIGINAL) The apparatus of claim 17, further comprising: 

a tuner, communicatively coupleable to the conditional access module for receiving the 
encrypted access control information and the program material encrypted according to a first 
encryption key; 

a third decryption module, for decrypting the program material using the first encryption key 
produced by the conditional access module; 

a second encryption module, for re-encrypting the decrypted program material according to 
the second encryption key; and 

a fourth decryption module, fot decrypting the re-encrypted program material according to 
the second encryption key. 

19. (CURRENTLY AMENDED) The apparatus of claim [18] 12, wherein the 
conditional access module further comprises: 

a pre-buy module, for controlling the first decryption module, 

20. (CURRENTLY AMENDED) The apparatus of claim [18J li wherein the access 
control information further comprises metadata describing at least one right for the program 
material. 

-5- 



PAGE 7/21 * RCVD AT 1/2012005 7:28:56 PM [Eastern Standard Time] * SVR:USPT0-EFXRF-1/2 * DNIS:8729306 1 CS(D:3109640941 * DURATION (mm-ss):06-24 



JAN-20-05 .16:34 -From: HUGHES LEGAL DEPT 



3109640941 



T-136 P. 08/21 Job-774 



21 . (CURRENTLY AMENDED) The apparatus of claim 20, wherein; 

yha conditional access module comprise a pre-buy module for controlling the fi*St 
decryption module, and for generates generating replay right data from the metadata. 

22. (ORIGINAL) The apparatus of claim 21, further comprising a buy module, 
communicatively coupled to the pte-buy module. 

23. (ORIGINAL) The apparatus of claim 22, wherein the buy module comprises: 

a purchase module for accepting buy data and comparing the buy data and the replay right 
data from the prc-buy module; and 

a control module for controlling the second decryption module based on the comparison 
between the buy data and the replay right data. 

24. (ORIGINAL) The apparatus of claim 23, further comprising a billing module, for 
recording the buy data. 

25. (ORIGINAL) The apparatus of claim 18, wherein the second encryption key is 
stored in the conditional access module. 

26. (ORIGINAL) The apparatus of claim 1 8, wherein the third encryption key is stored 
in the conditional access module. 

27. (ORIGINAL) The apparatus of claim 17, wherein the conditional access module is 
releaseably communicative coupleable to: 

a tuner for receiving the encrypted access control information and the program material 
encrypted according to a first encryption key; 

a third decryption module, for decrypting die program material using the first encryption key 
from the conditional access module 

a second encryption module, fox re-encrypting the decrypted program material according to 
the key; and 
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a media storage device. 

28, (CURRENTLY AMENDED) An apparatus for storing program material in a media 
storape device communicatively coupled to 3 receiver for replay, comprising: 

[means] a receiver, for accepting encrypted access control information and the program 
material encrypted according to a first encryption key, the access control information including a 
first encryption key and control data; 

[means] a condition^} access mo dule, releasahly coupleable with the receiver for decrypting 
the received access control information to produce the first encryption key; 

mean* for decrypting the program material using the first encryption key; 

means for re-encrypting the program material using according to a second encryption key; 

means in the conditional access module, for encrypting the second encryption key according 
to a third encryption key to produce a fourth encryption key; and 

means for providing the re-encrypted program material and a fourth encryption key for 

storage, 

29. (ORIGINAL) The apparatus of claim 28, wherein the encrypted access control 
information further comprises temporally-variant control data, and the apparatus further comprises: 

means for decrypting the received access control information to produce the tcmporally- 
varitmt control data; and 

means for modifying the temporally variant control data to generate temporally-invariant 
control data. 

30, (CANCELED) 

31. (CURRENTLY AMENDED) The apparatus of claim ([30]] 28, wherein the 
conditional access module is implemented on a smartcard eommunicatively ^ eoupleablc to a timet 1 
nirA a media st o iagc duviic . 
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32. (ORIGINAL) 'Ike apparatus of claim 28, wherein the access control information 
further comprises metadata describing at least one right for the program material. 

33. (ORIGINAL) The apparatus of claim 32, further comprising: 

means for generating the second encryption key at least in part from the metadata. 

34. (ORIGINAL) The apparatus of claim 32, further comprising: 
means for generating replay tight data from the metadata. 

35. (ORIGINAL) The apparatus of claim 34, wherein the means for generating the 
replay right data further generates replay right data from pte-buy data. 

36. (CURRENTLY AMEND KD) The apparatus of claim [[30]] 28, further comprising: 
means for retrieving the stored re-encrypted program material and the fourth encryption key; 
means for decrypting die fourth encryption key using the third encryption key to produce 

the second encryption key; and 

means for decrypting the re-encrypted material using the second encryption key. 

37. (ORIGINAL) The apparatus of claim 36, wherein the means for decrypting the 
fourth encryption key using the third encryption key to produce the second encryption key is 
performed in response to a subscriber request to access the program material. 



-8- 



PAGE 10/21 * RCVDAT 1/20/2005 7:28:56 PM [Eastern Standard Time] * SVR:USPTOff XRF-1/2 * DNIS:8729306 ■ CSID:31 09640941 * DURATION (mnws):06-24 



JAN-20-05 . 16:35 .Frora:HUCHES LEGAL DEPT 



3109640941 



T-136 P. 11/21 Job-774 



38. (ORIGINAL) The apparatus of claim 37, wherein the access control information 
further comprises metadata describing at least one righc for the program material, the subscriber 
request to access the program material comprises buy data, and the apparatus further comprises: 

means for generating replay right data from the metadata; 
means for accepting the buy data; 

means for comparing the buy data with the replay right data; and 

means for decrypting the fourth encryption key using the third encryption key to produce 
the second encryption key according to the comparison between the buy data and the replay right 
data. 

39. (ORIGINAL) The apparatus of claim 38, wherein: 

the second encryption key and the third encryption key are stored in a smartcard, and the 
replay right data is generated from the metadata and the pre-buy message in the smartcard; and 

the means for accepting the buy data, means for comparing die buy data with the replay 
right data, and means for decrypting the fourth encryption key using the third encryption key to 
produce the second encryption key according to the comparison between the buy data and the 
replay right data is implemented in die smartcard* 

40. (ORIGINAL) The apparatus of claim 28, wherein the re~encrypted program 
material and die fourth encryption key are stored on a media storage device. 

41. (ORIGINAL) The apparatus of claim 28, wherein the control data is temporally- 
variant. 

42. (ORIGINAL) The apparatus of claim 41, wherein the temporally-variant control 
data associates an expiration time with the program material. 

43. (NEW) The method of claim I , further comprising the a tep of generating the 
second encryption key in the conditional access module. 

-9- 



PAGE 1 1/21 * RCVD AT 1/20/20O5 7:28:56 PM [Eastern Standard Time] 1 SVR:USPT0€FXRF-1/2 * DNIS:8729306 * CSID:3109640941 * DURATION (mm-ss):06-24 



JAN-20-05 .16:35 .From: HUGHES LEGAL OEPT 



3109640941 



T-136 P. 12/21 Job- 



44. (NEW) The method of claim 1, wherein the access control information further 
comprises metadata and the method further comprises the step of generating the second encryption 
key at least in part from the metadata. 

45. (NEW) The method of claim 1 1 further comprising the step of: 
augmenting the second encryption key with at least a portion of the metadata before 

encrypting the second encryption key in the conditional access module. 

46. (NEW) The method of claim 1 , wherein the access control information further 
comprises metadata describing at least one right for the program material, and the method further 
comprises the step of; 

augmenting the second encryption key with at least a portion of the metadata before 
encrypting the second encryption key in the conditional access module. 

47. (NEW) The apparams of claim 20> wherein the conditional access module generates 
the second encryption key at least in part from the metadata. 

48. (NEW) The apparatus of claim 17, wherein the access control information further 
comprises metadata and the conditional access module generates the second encryption key at least 
in part from the metadata. 

49. (NEW) The apparatus of claim 20» wherein the conditional access module augments 
the second encryption key with at least a portion of the metadata before encrypting the second 
encryption key in the conditional access module. 

50. (NEW) The apparatus of claim 17, wherein the access control information further 
comprises metadata, and wherein the conditional access module augments the second encryption 
key widi at luast a portion of the metadata before encrypting the second encryption key in the 
conditional access module. 
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